[ZBX-9903] SLE12 and zabbix 2.2.10 usmHMACMD5AuthProtocol Created: 2015 Sep 24 Updated: 2019 Dec 10 |
|
Status: | Open |
Project: | ZABBIX BUGS AND ISSUES |
Component/s: | Proxy (P), Server (S) |
Affects Version/s: | 2.2.10 |
Fix Version/s: | None |
Type: | Incident report | Priority: | Trivial |
Reporter: | Marek Majchrowski | Assignee: | Unassigned |
Resolution: | Unresolved | Votes: | 0 |
Labels: | encryption, snmp, snmpv3 | ||
Remaining Estimate: | Not Specified | ||
Time Spent: | Not Specified | ||
Original Estimate: | Not Specified | ||
Environment: |
SLE 12 |
Description |
After some system upgrades there is an error to undefined symbol in zabbix-proxy and zabbix-server /usr/sbin/zabbix-proxy: symbol lookup error: /usr/sbin/zabbix-proxy: undefined symbol: usmHMACMD5AuthProtocol /usr/sbin/zabbix-server: symbol lookup error: /usr/sbin/zabbix-server: undefined symbol: usmHMACMD5AuthProtocol |
Comments |
Comment by richlv [ 2015 Sep 24 ] |
how was zabbix installed ? |
Comment by Marek Majchrowski [ 2015 Sep 24 ] |
From https://www.zabbix.org/wiki/Install_on_openSUSE_/_SLES |
Comment by Aleksandrs Saveljevs [ 2015 Sep 24 ] |
"usmHMACMD5AuthProtocol" is a symbol exported by Net-SNMP library and we use it in Zabbix to provide SNMPv3 authentication using MD5 (the other option being SHA). This is how it is declared in Net-SNMP: #ifndef NETSNMP_DISABLE_MD5 NETSNMP_IMPORT oid usmHMACMD5AuthProtocol[10]; /* == { 1,3,6,1,6,3,10,1,1,2 }; */ #endif Apparently, Net-SNMP library can be compiled with MD5 disabled and we should be able to work with that library (in the reporter's case, by recompiling the server from source, of course). |
Comment by Aleksandrs Saveljevs [ 2015 Sep 24 ] |
Same probably goes for DES, which has AES as the alternative: #ifndef NETSNMP_DISABLE_DES NETSNMP_IMPORT oid usmDESPrivProtocol[10]; /* == { 1,3,6,1,6,3,10,1,2,2 }; */ #endif |
Comment by Boris Manojlovic [ 2015 Sep 26 ] |
I'm running zabbix on SLE 12 machine In this moment i cannot update packages to newer (production system...) but will look to create new test server with updated packages |
Comment by Aleksandrs Saveljevs [ 2015 Sep 28 ] |
To clarify my previous comment, just in case:
The part "we should be able to work with that library" should read "we should make corresponding changes in Zabbix to be able to work with that library". |
Comment by Marek Majchrowski [ 2015 Sep 28 ] |
Hi, our environment: monitor-proxy:~ # rpm -qa | grep zabbix zabbix-agent-2.2.10-1.1.x86_64 zabbix-proxy-2.2.10-1.1.x86_64 zabbix-proxy-mysql-2.2.10-1.1.x86_64 monitor-proxy:~ # rpm -qa | grep libsnmp30 libsnmp30-5.7.2.1-4.3.2.x86_64 libsnmp30-32bit-5.7.2.1-4.3.2.x86_64 When I downgrade to: monitor-proxy:~ # zypper in --oldpackage libsnmp30-5.7.2.1-3.8.x86_64 Refreshing service 'XXXXXXXXXX'. Loading repository data... Reading installed packages... Resolving package dependencies... The following package is going to be downgraded: libsnmp30 1 package to downgrade. Overall download size: 873,5 KiB. Already cached: 0 B After the operation, additional 8,2 KiB will be used. Continue? [y/n/? shows all options] (y): y Retrieving package libsnmp30-5.7.2.1-3.8.x86_64 (1/1), 873,5 KiB ( 3,4 MiB unpacked) Retrieving: libsnmp30-5.7.2.1-3.8.x86_64.rpm ....................................................[done] Checking for file conflicts: ....................................................................[done] (1/1) Installing: libsnmp30-5.7.2.1-3.8 .........................................................[done] monitor-proxy:~ # systemctl restart zabbix-proxy.service And zabbix-proxy work fine. monitor-proxy:~ # zypper al libsnmp30 monitor-proxy:~ # zypper ll # | Name | Type | Repository --+-----------+---------+----------- 1 | libsnmp30 | package | (any) |
Comment by Boris Manojlovic [ 2015 Sep 28 ] |
Required symbol will be re-introduced in future updates in SLE:12:Updates so there will be no breakage of zabbix. I will update this bug report when this is done by SUSE. |
Comment by Boris Manojlovic [ 2015 Oct 31 ] |
Please remove lock and try update again as md5 is reintroduced into snmp |
Comment by Boris Manojlovic [ 2016 Mar 04 ] |
Please close this issue, it has been resolved |